summaryrefslogtreecommitdiff
path: root/doc/bugs/git_security_fix.mdwn
blob: 43b3f505f746488188fbdc70c895e41ba5e3d34b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
git had some remotely exploitable security holes announced recently
(CVE-2016-2324, CVE-2016-2315)

git-annex builds that bundle git need to be updated.

status of autobuilds:

* Linux is fixed (all builds)
* OSX is fixed
* Windows does not bundle git
* Android is fixed (git build is untested)

status of released builds:

* Linux is fixed (all builds)
* OSX is fixed (yosemite only; old builds vulnerable so removed)
* Windows does not bundle git
* Android is fixed (git build is untested)

[[done]] --[[Joey]]